wrangler 2.20.0 → 2.20.2

package/miniflare-dist/index.mjs

@@ -4624,12 +4624,12 @@ var YargsInstance = class {
   async getCompletion(args, done) {
     argsert("<array> [function]", [args, done], arguments.length);
     if (!done) {
-      return new Promise((resolve5, reject) => {
+      return new Promise((resolve6, reject) => {
         __classPrivateFieldGet(this, _YargsInstance_completion, "f").getCompletion(args, (err, completions) => {
           if (err)
             reject(err);
           else
-            resolve5(completions);
+            resolve6(completions);
         });
       });
     } else {
@@ -5678,7 +5678,7 @@ var FatalError = class extends Error {
 
 // src/miniflare-cli/assets.ts
 import { existsSync, lstatSync, readFileSync as readFileSync5 } from "node:fs";
-import { join } from "node:path";
+import { join, resolve as resolve5 } from "node:path";
 
 // ../pages-shared/metadata-generator/constants.ts
 var REDIRECTS_VERSION = 1;
@@ -6159,6 +6159,7 @@ async function generateASSETSBinding(options) {
   };
 }
 async function generateAssetsFetch(directory, log, tre) {
+  directory = resolve5(directory);
   const polyfill2 = tre ? (await Promise.resolve().then(() => (init_miniflare_tre(), miniflare_tre_exports))).default : (await Promise.resolve().then(() => (init_miniflare(), miniflare_exports))).default;
   await polyfill2();
   const miniflare = tre ? await import("@miniflare/tre") : await import("@miniflare/core");
@@ -6215,7 +6216,10 @@ async function generateAssetsFetch(directory, log, tre) {
       xServerEnvHeader: "dev",
       logError: console.error,
       findAssetEntryForPath: async (path) => {
-        const filepath = join(directory, path);
+        const filepath = resolve5(join(directory, path));
+        if (!filepath.startsWith(directory)) {
+          return null;
+        }
         if (existsSync(filepath) && lstatSync(filepath).isFile() && !ignoredFiles.includes(filepath)) {
           const hash = hashFile(filepath);
           assetKeyEntryMap.set(hash, filepath);

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "wrangler",
-	"version": "2.20.0",
+	"version": "2.20.2",
 	"description": "Command-line interface for all things Cloudflare Workers",
 	"keywords": [
 		"wrangler",
@@ -120,7 +120,7 @@
 		"@cloudflare/workers-types": "^4.20221111.1",
 		"@iarna/toml": "^3.0.0",
 		"@microsoft/api-extractor": "^7.28.3",
-		"@miniflare/tre": "3.0.0-next.13",
+		"@miniflare/tre": "3.0.0-next.14",
 		"@types/better-sqlite3": "^7.6.0",
 		"@types/busboy": "^1.5.0",
 		"@types/command-exists": "^1.2.0",

package/src/__tests__/api-devregistry.test.ts

@@ -40,7 +40,7 @@ describe("multi-worker testing", () => {
 	});
 
 	it("parentWorker and childWorker should be added devRegistry", async () => {
-		const resp = await fetch("http://localhost:6284/workers");
+		const resp = await fetch("http://127.0.0.1:6284/workers");
 		if (resp) {
 			const parsedResp = (await resp.json()) as {
 				parent: unknown;